Advances in volatile memory forensicsSchatz, Bradley; Cohen, Michael · Digital Investigation · 2017

Extending the advanced forensic format to accommodate multiple data sources, logical evidence, arbitrary information and forensic workflowMichael Cohen; Simson Garfinkel; Bradley Schatz · 2009